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DETAILED ACTION 

1 . Claims 1 -24 have been examined and are pending with this action. Claims 1,10, 
and 17 have been amended. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

2. Claims 1, 10, and 17 are rejected under 35 U.S.C. 112, first paragraph, as failing 
to comply with the written description requirement. The claim(s) contains subject 
matter, which was not described in the specification in such a way as to reasonably 
convey to one skilled in the relevant art that the inventor(s), at the time the application 
was filed, had possession of the claimed invention. 

The examiner could not find within the specification, support for the amended 
claim language "has no pre-assigned relationship with the gateway device based on 
pre-defined protocols", "without requiring a pre-assigned relationship between the 
source computer and the gateway device based on pre-defined protocols", or "without 
requiring the source to be in a pre-assigned relationship with the gateway device based 
on pre-defined protocols and without requiring the source computer to include network 
software configured for the network", as recited in claims 1,10, and 17, respectively. 
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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AIPA (pre-AlPA 35 U.S.C. 102(e)). 

3. Claims 1-16, are rejected under 35 U.S.C. 102(e) as being anticipated by 

Sitaraman et al. (US 6,385,653 A). 

INDEPENDENT: 

As per claim 1 , Sitaraman teaches a method for selectably controlling and 
customizing source access to a network, wherein the source is associated with a source 
computer, comprising: receiving at the gateway device a request from the source 
computer for access to the network (see col.3, lines 36-40 and col.4, lines 39-44), 
wherein the source computer has no pre-assigned relationship with the gateway device 
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based on pre-defined protocols (see col.1, lines 9-12 and implicitly: col.3, lines 25-30) 
and no configuration software need be installed on the source computer to access the 
network (see col .4, lines 60-67); identifying an attribute associated with the source (see 
col .4, lines 55-67) based upon a packet transmitted from the source computer (see 
col.col.4, lines 50-51) and received by the gateway device (see col.4, lines 39-44); 
accessing a source profile corresponding to the source and stored in a source profile 
database, wherein the source profile is accessed based upon the attribute (see Fig.2; 
col.2, lines 52-58; col.3, lines 23-25; and co|.5, lines 38-44), and wherein the source 
profile database is located external to the gateway device and in communication with 
the gateway device (see Fig.1 ), and determining the access rights of the source based 
upon the source profile, wherein access rights define the rights of the source to access 
the network (see col.1, line 63-col.2, line 19 and col.5, lines 1-10). 

As per claim 10, Sitaraman teaches a system for selectably controlling and 
customizing access, to a network, by a source, where the source is associated with a 
source computer, and wherein no configuration software need be installed on the 
source computer to access the network, comprising: a gateway device, wherein the 
gateway device receives a request from the source for access to the network (see col.3, 
lines 36-40 and col.4, lines 39-44) and provides the source computer with access to the 
network without requiring a pre-assigned relationship between the source computer and 
the gateway device based on pre-defined protocols (see col.1, lines 9-12 and implicitly: 
col.3, lines 25-30); a source profile database in communication with the gateway device 
and located external to the gateway device (see Fig.1), wherein the source profile 
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database stores access information identifiable by an attribute associated with the 
source, and wherein the attribute is identified based upon a data packet transmitted 
from the source computer and received by the gateway device (see Fig.2; col .2, lines 
52-58; col.3, lines 23-25; and col.5, lines 38-44), and an Authentication, Authorization 
and Accounting (AAA) server in communication with the gateway device and source 
profile database, wherein the AAA server determines if the source is entitled to access 
the network based upon the access information stored within the source profile 
database, and wherein the AAA server determines the access rights of the source, 
wherein access rights define the rights of the source to access destination sites via the 
network (see col.1, line 63-col.2, line 19 and col.5, lines 1-10). 
DEPENDENT: 

As per claim 2, Sitaraman further teaches wherein determining the access rights 
of the source based upon the source profile comprises determining the access rights of 
the source based upon the source profile, wherein access rights define the rights of the 
source to access a requested network destination (see col.1 , line 63-col.2, line 19 and 
col.5, lines 1-10). 

As per claim 3, Sitaraman teaches of further comprising assigning a location 
identifier to the location from which requests for access to the network are transmitted, 
and wherein the location identifier is the attribute associated with the source (see col. 2, 
lines 23-38 and col .8, lines 29-40). 

As per claims 4 and 12, Sitaraman further teaches wherein accessing a source 
profile corresponding to the source comprises accessing a source profile stored in a 
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source profile database, wherein the source profile database comprises a remote 
authentication dial-in user service (RADIUS) (see col .2, lines 3-5 and col.7, lines 2-10). 

As per claims 5 and 13, Sitaraman further teaches wherein accessing a source 
profile corresponding to the source comprises accessing a source profile stored in a 
source profile database, wherein the source profile database comprises a lightweight 
directory access protocol (LDAP) database (see col.1 1, lines 35-38). 

As per claim 6, Sitaraman teaches of further comprising updating the source 
profile database when a new source accesses the network (inherent: see col .3, lines 
25-34). 

As per claim 7, Sitaraman teaches of further comprising maintaining in the 
source profile database a historical log of the source's access to the network (inherent: 
"AAA"). 

As per claim 8, Sitaraman further teaches wherein the attribute associated with 
the source is based upon one of a MAC address, User ID orVLAN ID associated with 
the source computer from which the request for access to the network was transmitted 
(see col.1, lines 65-66 and col.8, lines 20-25). 

As per claim 9, Sitaraman further teaches wherein receiving at the gateway 
device a request from a source for access comprises the step of receiving a destination 
address from the source (see col.3, lines 11-14). 

As per claim 1 1 , Sitaraman further teaches wherein the packets received by the 
gateway device include at least one of VLAN ID, a circuit ID, and a MAC address (see 
col.3, lines 11-14). 
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As per claim 14, Sitaraman further teaches wherein the source profile database 
includes a plurality of source profiles, wherein each respective source profile of the 
plurality of source profiles contains access information (see col .5, lines 38-44). 

As per claim 15, Sitaraman further teaches wherein each respective source 
profile contains historical data relating to the duration of network access for use in 
determining the charges due for the network access (inherent: "AAA"). 

As per claim 16, Sitaraman further teaches wherein the source profile database 
is located within the AAA server (see Fig.1). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 17 and 20-24, are rejected under 35 U.S.C. 103(a) as being unpatentable 

over Sitaraman et al. (US 6,385,653 A) in view of Bowker et al. (US 6,317,790 B1). 

As per claim 17, Sitaraman teaches a method for redirecting a source attempting 

to access a destination through a gateway device, wherein source is associated with a 

source computer, and wherein the gateway device enables the source to communicate 

with a network, comprising: receiving at the gateway device a request from the source 

to access the network (see col .3, lines 36-40 and col .4, lines 39-44) without requiring 
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the source to be in a pre-assigned relationship with the gateway device based on pre- 
defined protocols (see col.1 , lines 9-12 and implicitly: col,3, lines 25-30) and without 
requiring the source computer to include network software configured for the network 
(see col.4, lines 60-67); identifying the source based upon an attribute associated with 
the source (see col.4, lines 50-59 and col. 6, lines 46-51 ); accessing a source profile 
database located external to the gateway device, the source profile database storing 
access rights of the source (see Fig.2; col.2, lines 52-58; col.3, lines 23-25; and col.5, 
lines 38-44); determining the access rights of the source based upon the identification of 
the source, wherein the access rights define the rights of the source to access 
destination sites via the network (see col.1, line 63-col.2, line 19 and col.5, lines 1-10). 

Sitaraman does not explicitly teach directing the source to a redirection site when 
the source profile is not located within the source profile database. Bowker teaches of 
directing the source to a redirection site when the source profile is not located within the 
source profile database (see col.1 1, lines 2-5; col. 13, lines 59-62; and col. 14, lines 30- 
33 & 59-61 ). It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to employ the teachings of Bowker within the system of 
Sitaraman by implementing a redirection site for directing the source when the source 
profile is not located within the source profile database because such an implementation 
allows a condition to be applied such as redirection to a registration site for sources 
without a profile or redirection to a notification site denying access to invalid sources 
(see Bowker: col. 14, lines 14-16). 
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As per claim 18, Sitaraman further teaches wherein accessing a source profile 
database comprises accessing a source profile database comprising a remote 
authentication dial-in user service (RADIUS) (see col .2, lines 3-5 and col.7, lines 2-10). 

As per claim 19, Sitaraman further teaches wherein accessing a source profile 
database comprises accessing a source profile database comprising a lightweight 
directory access protocol (LDAP) database (see col .11, lines 35-38). 

As per claim 20, Sitaraman teaches of further comprising assigning a location 
identifier to the location from which requests for access to the network are transmitted, 
and wherein the location identifier is the attribute associated with the source (see col. 2, 
lines 23-38 and col .8, lines 29-40). 

As per claim 21 , Sitaraman teaches of further comprising updating the source 
profile database when a new source accesses the network (inherent: see col. 3, lines 
25-34). 

As per claim 22, Sitaraman teaches of further comprising maintaining in an 
accounting database a historical log of the source's access to the network (inherent: 
"AAA"), wherein the accounting database is in communication with the source profile 
database (see Fig.1). 

As per claim 23, Sitaraman further teaches wherein receiving at the gateway 
device a request from a source for access comprises the step of receiving a destination 
address from the source (see col. 3, lines 11-14). 

As per claim 24, Sitaraman further teaches wherein determining if the source 
computer is entitled to access the destination address further comprises denying the 
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source computer access where the source profile indicates that the source computer is 
denied access (see col.2, lines 20-23). 



Response to Arguments 

5. In response to the argument regarding claims 1,10, and 17, specifically that the 
'499 patent Ankney does not explicitly teach "a source computer that has access to the 
network via a gateway device without requiring a pre-assigned relationship based on 
pre-defined protocols", have been considered but are moot in view of the new ground(s) 
of rejection. 

The examiner concurs that Ankney does not teach this limitation, however, the 
examiner also notes that such limitation is not supported by the specification. The 
applicant(s) is suggested to provide the examiner with the proper page and column 
number explicitly teaching such limitation. Nonetheless, '653 patent Sitaraman has 
been discovered to more clearly teach the claimed invention including the amended 
limitation (see action above). 

Although, examiner does not agree with the applicant's argument regarding 
Ankney's teaching that "no configuration software need to be installed on the source 
computer to access the network, such argument is moot in view of the new ground(s) of 
rejection. Sitaraman clearly teaches rather than installing configuration software, the 
packets are encapsulated via the gateway ports (see col. 6, lines 31-33 & 49-52). 
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6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Michael Y. Won whose telephone number is 571-272- 
3993. The examiner can normally be reached on M-Th: 7AM-5PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hosain T. Alam can be reached on 571-272-3978. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 

Michael Won 





April 14, 2005 



HOSAIN ALAM 

SUPERVISORY PATENT EXAMINER 



